Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS262231.roa
File:                     AS262231.roa (raw, json)
Hash identifier:          F+3qATxOePjrk/0xhqVEwVOjuh3kDr1uGvX8i2JZ3Iw=
Subject key identifier:   34:6C:06:95:87:92:C4:57:48:02:7D:A1:A6:37:4D:38:19:E1:8A:2E
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       493904A9B748D098048E560DE1DE55A4AE1709EC
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS262231.roa
Signing time:             Tue 04 Feb 2025 18:13:40 +0000
ROA not before:           Tue 04 Feb 2025 18:08:40 +0000
ROA not after:            Tue 03 Feb 2026 18:13:40 +0000
asID:                     262231
IP address blocks:        186.38.37.0/24 maxlen: 24
                          186.38.105.0/24 maxlen: 24
                          186.56.97.0/24 maxlen: 24
                          201.251.48.0/24 maxlen: 24
                          201.251.123.0/24 maxlen: 24
                          201.251.221.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:39:04:a9:b7:48:d0:98:04:8e:56:0d:e1:de:55:a4:ae:17:09:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Feb  4 18:08:40 2025 GMT
            Not After : Feb  3 18:13:40 2026 GMT
        Subject: CN=346C06958792C45748027DA1A6374D3819E18A2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:4e:7b:4e:de:c4:72:be:ad:99:26:7b:e2:3a:
                    f8:3d:5c:79:48:9a:f9:ec:56:95:3d:22:52:38:cb:
                    db:a3:bb:3c:ee:3a:69:c3:54:38:d5:7d:bf:7e:5d:
                    8b:23:35:ac:c1:59:1a:af:b1:8d:f2:5e:0d:bf:5e:
                    ef:d0:08:72:7e:eb:af:9f:b7:ac:ec:2c:06:d8:57:
                    c9:4e:13:a4:24:06:a6:bf:91:52:12:2d:2b:3f:55:
                    e3:17:86:0e:58:d5:15:6b:ab:a8:8f:23:84:d3:d5:
                    b2:05:d7:f4:e8:6b:fd:cd:f4:aa:3e:df:17:f5:38:
                    28:1f:a3:e5:7f:84:3b:72:ec:9d:a9:e7:4e:71:05:
                    f6:b3:47:b6:15:d4:87:40:00:3a:22:51:0e:fa:1b:
                    e6:a6:7b:da:78:3a:b7:10:b5:e6:3c:83:c5:41:f5:
                    a1:6c:cc:8f:f0:4f:a8:f6:e9:f9:f4:61:2b:85:22:
                    38:6b:72:d8:a4:cc:93:cf:ec:be:de:44:34:e4:e8:
                    4d:51:b4:fa:3f:57:2b:dc:d6:54:84:d9:50:a0:d8:
                    0c:3b:6d:44:da:f5:45:0c:ae:00:3f:6f:65:4d:6f:
                    24:bf:86:8a:6c:3a:ca:1c:58:32:31:50:f3:c0:0d:
                    2a:ba:1b:e5:df:89:71:6a:32:0b:a7:bd:58:f8:2d:
                    d4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6C:06:95:87:92:C4:57:48:02:7D:A1:A6:37:4D:38:19:E1:8A:2E
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS262231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.38.37.0/24
                  186.38.105.0/24
                  186.56.97.0/24
                  201.251.48.0/24
                  201.251.123.0/24
                  201.251.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:25:40:83:43:d7:95:64:f3:55:71:7d:7c:70:7f:69:61:51:
         a0:c9:91:2d:b6:d4:f1:df:4f:15:bb:37:c5:29:fc:f5:7a:95:
         fb:e6:d6:81:6e:8c:05:61:58:ee:7e:c3:52:92:65:c1:bb:72:
         de:7c:16:07:fb:08:89:1a:86:0d:89:a7:57:67:eb:cf:aa:f9:
         a5:f1:c0:04:65:2d:77:64:9a:f5:2e:85:2c:af:b3:df:2f:23:
         1b:17:4a:17:16:93:e8:14:3b:6b:f2:b2:98:6e:dc:1a:5b:f5:
         0f:b5:fd:a0:1b:b5:22:82:77:b2:78:27:1d:c0:0c:91:6b:3d:
         c5:09:c5:78:0f:2f:d6:25:b6:5f:38:e2:06:4e:b8:51:9d:77:
         cb:56:ba:cf:18:7e:fc:63:a8:b2:18:ee:81:3b:f0:48:bc:f0:
         85:42:75:04:e9:9c:ab:8a:8f:19:48:84:7a:3f:cb:55:6b:50:
         d5:17:d0:ef:f1:de:eb:50:84:d5:d4:fa:2d:a7:a5:e2:5c:56:
         f4:e3:03:87:b9:c6:ab:66:04:06:b6:68:93:69:b8:d5:a4:d6:
         4c:5b:bb:5a:d4:d6:27:82:6c:ba:ab:d6:6d:b5:b1:92:8e:fd:
         b9:1a:da:fc:89:61:15:37:98:fe:74:09:52:14:bf:a7:75:b2:
         ca:b8:e7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:06 2025 by rpki-client